Skip to main content
shelzmike
shelzmike
New Member
August 17, 2012
Question

Is there no way to bulk add URLs to the URL Filter?

  • August 17, 2012
  • 5 replies
  • 8121 views
We have recently adopted a block all/allow only whitelsted url policy for one department and yes it works great and yes it has been a pain (with all the linked stylesheets, certificate sites, etc.); however, we are getting it done. The biggest pain is the process by which you have to manually add each URL individually and this seems very low tech at best. Is there not a way (via CLI or other) that will allow me to upload a bulk list? If not, this is pretty sorry and I would expect Fortinet to allow this as a standard feature. Thanks. Mike

    5 replies

    pchechani_FTNT
    Staff
    pchechani_FTNT
    Staff
    August 18, 2012
    I have fortigate 80CM, and attaching a picture from where you can do bulk upload of cli commands if you have it in txt file: navigate till System->Config->Advanced. Very first option or depend on the FGT, there is option for Upload Bulk CLI command File. See attched PIC
    rwpatterson
    rwpatterson
    New Member
    August 19, 2012
    Additionally, if you have the command(s) formatted, you could paste them into a CLI window.
    shelzmike
    shelzmikeAuthor
    New Member
    August 20, 2012
    Thanks for the link to the bulk command file upload. I knew I probably had to do it that way, but couldn' t figure out how to paste into the CLI (it wouldn' t let me and I figured I could do it via the console port, but cannot find the cable). I already did it manually, but next time I will keep this in mind. On another note, will the URL filters cascade. Say for instance, I have a flitered group that I only want to be able to access A,B,C, & D sites. I use a Whitlist blocking method to block all but those 4 (which i have setup now and it works). Say though I have managers who actually need access to A & B, but not C & D. Can I have a policy that blocks out all but the 4 and then have a policy that actually allows managers access to A & B explicitly but put it before the blocking policy in the firewall, will that work? Thanks! Mike
    rwpatterson
    rwpatterson
    New Member
    August 20, 2012
    ORIGINAL: shelzmike Thanks for the link to the bulk command file upload. I knew I probably had to do it that way, but couldn' t figure out how to paste into the CLI (it wouldn' t let me and I figured I could do it via the console port, but cannot find the cable).
    In the CLI, <CTRL> V (paste)
    shelzmike
    shelzmikeAuthor
    New Member
    August 20, 2012
    I tried that but for some reason, it did not work. Maybe it had to do with the browser I was using. I dunno. Thanks again though. Mike
    rwpatterson
    rwpatterson
    New Member
    August 20, 2012
    Make sure nothing has been highlighted with the mouse (no white blocks of text marked). Then it should go fine.
    Rick_H
    Rick_H
    New Member
    September 20, 2012
    You can also SSH/telnet into your FGT if those protocols are enabled. Then you can use the TTY software of your choice (PuTTY works well for me) and paste however you want! Cheers, Rick
    sean_powell
    sean_powell
    New Member
    November 10, 2012
    this relates to my adblock question that i' ve posted... in the bulk upload CLI is this the correct format for the text file? 
      config webfilter urlfilter      edit 1              config entries                  edit " *.xxx"                       set action block                      set type wildcard                  next  end  set name " blocked sites"   next  end
    and I can fill in the sites I want to block adding an entry for each... is that correct?
    Terms & ConditionsAccessibility statement